XGS HA with Sophos switches

You can use Sophos switches as access-layer switches to configure high availability on Sophos Firewall devices.

High availability (HA) is a clustering technology used to maintain uninterrupted service in the event of power, hardware, software, or port failure on upstream devices, such as switches or gateway routers.

You can configure a Sophos Firewall pair in active-active or active-passive HA modes. The firewalls (primary and auxiliary) are physically connected over a dedicated HA link port.

In active-active mode, both the primary and auxiliary devices process traffic while the primary unit oversees load balancing of the traffic. The auxiliary device takes over only if the primary device experiences a power, hardware, or software failure.

In active-passive mode, only the primary (active) device processes traffic. The auxiliary device remains in standby mode, ready to take over if the primary device experiences a power, hardware, or software failure.

For prerequisites for configuring HA, see Sophos Firewall high availability prerequisites.